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1. INTRODUCTION 

At this time, users attempt to select a shorter password to authenticate their accounts. The password 
may be easy forgotten and it can be easily attacked. Widely used technologies such as voice recognition, 
Bar-code, Fingerprint scanning, iris recognition and face recognition now play an important role, particularly 
in security-related applications [1]. The bar code is one dimensional and becomes illegible when damaged. 
Bar-code has some disadvantage like it stores only up to 20 digits. For this reason, in the bar code, we cannot 
store passwords or complex phrases, so it doesn’t provide the best method for authentication. QR codes are 2D 
barcode can be read from any orientation and it has the ability to hold up to 4,296 characters alphabetically. 
Another feature of QR code is that it can be read after partly damaged. Make its feature of QR code very strong 
and popular in the security and advertising industry [2]. For this reason, QR code is chosen in this paper. 

Several published works are related to the objectives of this work for example, Sim Hiew 
Moi et al. [1] present a new approach by using iris template to create a unique and more secure encryption key 
and used AES algorithm to encrypt and decrypt data of identity data. Tejas Mohod et al. [2] implement a system 
that takes properties of both iris and QR code; this enhances system isolation, cost effective and reliable security 
system. M. A. Murillo-Escobar et al. [3] proposed a new fingerprint template protection based on logistic map 
and Murillo-Escobar’s algorithm. Mohammad Soltani and Amid Khatibi Bardsiri [4] proposed a hybrid 
algorithm for encryption and steganography, they generated the QR-code using input text and encrypted 
the resulting QR image using 2D logistic map then convert the encrypted QR to text, after that they encrypted 
the original text using AES algorithm and hiding it using LSB algorithm. Sruthi B. Asok et al [5] extracts 
a secret key from iris image and use it to encrypt data. Nishi Prasad et al. [6] Used three level of security for 
image encryption. They used logistic map, secret key cryptography, and QR codes. M. Mary Shanthi Rani and 
K. Rosemary Euphrasia [7] proposed an encryption method by using QR code for message encryption and 
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generate another QR code for authentication and hiding it in cover image. A. Husain and R. Ali [8] increased 
the security of finger print image based on QR code to extract encryption key. In this paper there is a weakness 
in the quality of encrypted image, so we suggest a modifying for this method to get better results. 

In this paper, a new algorithm is proposed for Iris image encryption based on QR code feature 
extraction and chaotic map. This algorithm will increase the security of Iris image by using QR code to generate 
the key, high diffusion that provided by permutation method and the chaotic system that provides the confusion. 
The randomness of the key that generated using QR code was tested using NIST tests and proved to be efficient. 
The results of this work are compared with the results of [8] by histogram, entropy, UACI, NPCR, correlation 
and PSNR. The experimental results show that the proposed approach is more efficient and secure for iris 
image encryption. The reminder of this paper is arranged as follows. In section 2 the methods that used in 
proposed algorithm will be presented. In section 3 the proposed method is described in details. In section 4 QR 
key NIST tests will be display. The security analysis is shown in section 5. Finally, the conclusions are shown 
in section 6. 


2. THEORETICAL BACKGROUND 
2.1. Quick response code 

The quick response (QR) Code was first designed by Japanese company for cars industry called 
Denso-Wave in 1994 to track car parts. QR code is kinds of bar-code that can be recognize using a bar-code 
reader. It can contain encoded information like website URLs, data, and texts, etc. Today, QR codes 
are widely used as it used in companies, businesses and government departments because of their reliability 
and ease of use [2, 9]. Also, QR can use in security purpose. The information contained in the code can 
be encrypted and decrypted by using special software ensuring better security. QR structure is shown 
in Figure 1. QR codes contain many areas that explain as follow: 

a) Finder pattern: It consists of 3 symmetrical structures at three corners of the QR code with one missing 
at the bottom right. Each pattern is based on a 3x3 matrix of black modules surrounded by white modules 
that are again surrounded by black modules. The finder patterns enable the decoder software to recognize 
the QR Code and determine the correct orientation [10]. 

b) Timing pattern: this pattern for discovering the central coordinate of each data cell the QR code with 
black and white designs are placed alternately in two places horizontally and vertically between the finder 
patterns. even if the code is distorted partially or an error for the cell pitch, this allows accurate reading 
of central coordinates. It tracks the time of incoming code [11, 12]. 

c) Alignment pattern: a model for correcting the distortion of the code. It is particularly efficient for 
correcting nonlinear distortions. The central coordinate of the alinement pattern will be discovered to 
correct the distortion of the symbol. For this purpose, an isolated black cell is directed in the conjunction 
pattern for getting it easy to detect the central coordinate of the alignment pattern [13]. 

d) Quiet zone: this area empties from any markings. A margin space is needed for reading QR code rightly. 
This free zone makes the QR code symbol easy to read by the CCD sensor [14]. 

e) Data area: in this area the QR code data and error correction code will be stored. The data area is 
represented by the grey area in Figure 1. The data will be encoded into 1’s and 0’s. The binary numbers 
will be converted into white and black cells and then will be arranged [14]. 
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Figure 1. QR structure 
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2.2. Logistic map 
A one-dimensional logistic map is described in the following equation: 


Xn +1=HUXn (1 — Xn) (1) 


where xX, refer to the nth output and u is the map’s parameter and the range of it should be within the period 
(3.56, 4]. The initial value xg and u can be used as a key of encryption [15]. While the 2D logistic has more 
complex behaviors in image encryption than a 1D logistic map for this reason this paper use it to encrypt 
images. 2D logistic map can be show as follow [4]: 


Xn +1 ~ r(3Yn T 1)Xn (1 a Xa) 2) 
Yn+1 = TBXn41 + 1)Yn (1 — Yn) 


where r is the parameter of system and (Xp, Yn) is is the pair-wise point at the n iteration. As shown in 
Figure 2 the scatter plot of 30,000 points of 2D logistic map using the parameter r = 1.19 and the initial value 
(Xo » Yo) at (0.8309,0.3342). 
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Figure 2. A trajectory of 2D logistic map [4] 


3. PROPOSED SCHEME 
The proposed scheme contains three main operations are: permutation, encryption with QR key and 
encryption with 2D logistic map. The general system structure is shown in Figure 3. 


3.1. Permutation method 

Permutation is most significant step in this algorithm. It works to block the high correlation among 
pixels of image to increase the security of image encryption algorithm. In this method we relied on scrambling 
rows and columns based on sum invariance of row and column through circular shift process. 
In the beginning it shifts each row in image by the total sum of the row and column's pixel values and save 
the result in a variable, and then implement the same method in each column and save the result in another 
variable. Finally, implement Xor operation between the two results. Figure 4 shown the plain iris image and 
the resulting image after permutation. 


3.2. QR key generation 
The first step is generating the QR code depending on the input text, then implement preprocessing 
operations such as histogram equalization and binarization on QR image. After that the features will 


be extracted from QR image by using convolution. These features are representing a random key which used 
to first encryption process. 
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Figure 3. General structure of proposed system Figure 4. (a) Plain iris image, 
(b) Permuted iris image 





3.3. Histogram equalization 

It’s a method for adjust image contrast. Let f be an image represented as a matrix r x c of integer pixel 
intensities ranging from O to L-1. Where L is the number of gray level values in image, often 256. 
Let p is the normalized histogram of f [16]. 


number of pixels with intensity n 


i ee ee, (3) 


total number of pixels 
The histogram equalized image g will be defined by: 


gij = floor((L — 1) 5 t py) (4) 


in this paper, after transform any input text to QR code, the next step is histogram equalization and the result 
of this step shown in Table 1. 


Table 1. The result for QR code, histogram equalization and binarization 
No. bit of 
text 


QR Code 


Histogram 
Equalization 


Binarization 
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3.4. Binarization 

Binarization is the process of convert a gray level image to binary image, this step is an important step 
to distinguish black-and-white module accurately in QR code images. So, we proposed use binarization 
operation to extract the features from QR image. In this method, the QR code 1s divided into 16x160-bit blocks. 
The value of the intensity of these blocks is analyzed and the pixel value is then determined as 1 if 
the pixel value is greater than the average intensity of that block, otherwise make it equal to 0. Table 1 shows 
the result of QR code, histogram equalization and binarization for number bit of text (8-bit, 16-bit, 24-bit, 
32-bit, 40-bit, 48-bit). 


3.5. Feature extraction using convolution 

The convolution between two functions f (x), g(x) which we denote by (f * g) (t), the convolution 
gives the inverse Laplace transform of a product of two transformed functions, for this reason it’s an important 
construct [17]: 


L” (F(s) G(s) = * g) © S) 


If f(x), g(x) are causal functions then their convolution is defined by: 


(Fxg) E) = S, flt- r)gr)dx (6) 


the proposed system used convolution for extract the features from QR code to generate random key. Table 2 
shows the masks that used in convolution, and the best result histogram equalization and convolution illustrate 
in the Table 3. 


Table 2. The masks that used in convolution 
Matrix No. 3x3 masks Convolution Matrix 
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Table 3. The best result of histogram equalization and convolution 
No Masks 1 2 3 4 5 6 7 8 9 





3.6. Encryption algorithm 
Input: plain image (m), QR_key, Logistic_key 
Output: encrypted image (E) 
Step1: read colored image (m) 
Step2: for c1: size (m) 
Iı- circular_shift (sum (m (column))) 
end 
for r—1: size (m) 
be circular_shift (sum (m (row))) 
end 
p< xor (lı, 2) 
Step3: k- xor (QR_key, p) 
Step4: E< xor (Logistic_key, k) 
Step5: end 


4. SECURITY ANALYSIS 

In this section we present a series of tests results to proof the effectiveness of the proposed scheme 
and compare the results with [8]. In this test we used dataset that captured by Michal Dobeš and Libor Machala. 
The dataset contains 3x128 iris images. The irises images were scanned using TOPCON TRCSOIA optical 
device connected with SONY DXC-950P 3CCD camera [18]. The experiments are performed via Matlab 
R2013a on a computer with Intel Core 17 CPU 1.99 GHz, 8 GB of RAM. 


4.1. QR key tests 
After features extraction form QR code. The generated key is tested by NIST tests, and the results of 
key tests are illustrated in Table 4. 


4.2. Histogram analysis 

Histogram analysis is used to explain the diffusion and confusion characteristic of the encryption 
algorithm. Table 5 shown the difference in distributed of image among plain iris image, its permutation and 
its encryption. 


4.3. Correlation analysis 


The correlation between two adjacent pixels in the ordinary image is permanently strong, 
and the values of correlation are so close to 1. For this reason, the correlation must be reduce significantly in 
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an efficient encryption algorithm and the value so close to O [19, 20]. We can compute the correlation 
coefficients for three directions horizontal, vertical, and diagonal, according to the following equations: 


cov(x, y=E{(x — E(x) )(y-E(y))$ (7) 
__ Cov(x, y) 

n Tay DO (8) 

E(x) = — Yh, x; (9) 

D(x) = = Dia — E@))? (10) 


in (3), x and y are the values of two neighboring pixels in the image, D(x) and E(x) are the variance and 
the expectation of x. N in (9) and (10) is the number of pixels in image. Figure 5 shown the horizontal, vertical 
and diagonal correlation coefficient in plain and encrypted iris image. Table 6 shown the results of correlation 
for sample of plain iris images and encrypted images and compared it with [8]. 


Table 4. Test key results 


No. Test Type Parameterize test No. Test Success Failure % 

1 G using SHA-1 Approximate Entropy TEST 255 255 0 100% 
BLOCK FREQUENCY TEST 255 255 0 100% 
CUMULATIVE SUMS TEST 510 503 7 98.6% 
Discrete FFT TEST 255 253 0 100% 
Frequency TEST 255 253 2 99.2% 
LEMPEL-ZIV COMPRESSION TEST 255 253 2 99.2% 
linear-complexity 255 255 0 100% 
Non periodic-templates 255 255 0 100% 
overlapping-templates 37740 35855 1885 95% 
random-excursions 255 259 0 100% 
runs 255 255 0 100% 
Serial 255 252 3 98.8% 

2 Linear Cingruential Approximate Entropy TEST 128 128 0 100% 
BLOCK FREQUENCY TEST 128 123 5 96% 
CUMULATIVE SUMS TEST 256 248 8 96.8% 
Discrete FFT TEST 128 128 0 100% 
FREQUENCY TEST 128 123 5 96% 
LEMPEL-ZIV COMPRESSION TEST 128 0 128 0% 
linear-complexity 128 128 0 100% 
Non periodic-templates 18944 16675 2269 88% 
overlapping-templates 128 128 0 100% 
RANK TEST 128 128 0 100% 
RUNS TEST 128 126 2 98.4% 
SERIAL TEST 256 250 6 97.6% 

3 Blum-Blum-Shub Approximate Entropy 128 128 0 100% 
BLOCK FREQUENCY TEST 128 125 3 97.6% 
CUMULATIVE SUMS 256 253 3 98.8% 
Discrete FFT 128 128 0 100% 
FREQUENCY TEST 128 125 3 97.6% 
LEMPEL-ZIV COMPRESSION TEST 128 128 0 100% 
linear-complexity 128 128 0 100% 
Non periodic-templates 18944 16705 2239 88% 
overlapping-templates 128 128 0 100% 
RANK TEST 128 128 0 100% 
RUNS TEST 128 128 0 100% 
SERIAL TEST 256 255 1 99.6% 

4 XOR Approximate Entropy 180 180 0 100% 
BLOCK FREQUENCY TEST 180 180 0 100% 
Discrete FFT 180 180 0 100% 
CUMULATIVE SUMS 362 362 0 100% 
FREQUENCY TEST 180 179 1 99.4% 
LONGEST RUNS OF ONES TEST 180 180 0 100% 
LEMPEL-ZIV COMPRESSION TEST 180 180 0 100% 
RANK TEST 180 180 0 100% 
NONPERIODIC TEMPLATES TEST 26788 21429 5359 79.9% 
RUNS TEST 180 lig 3 98.3% 
SERIAL TEST 362 357 5 98.6% 
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Table 5. Histogram analysis of original, permuted and encrypted RGB iris image 
Description Image R, G and B bands Histogram 


Original 


iris image 


Permuted 
image 
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QR key 
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Logistic 
key 
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Figure 5. Correlation of two neighboring pixels in plain and encrypted iris image 
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Table 6. Comparing correlation coefficients of two neighboring pixels in the plain and 
encrypted images between proposed system and [8] 


I Correlation of proposed system Correlation of A. Husain [8] 
ca Vertical Horizontal Diagonal Vertical Horizontal Diagonal 
0.0738 0.0836 0.0743 0.0138  -6.6318e-04 0.01 
-0.0026 -0.0015 0.0043 0.0743 0.0654 -0.0529 
0.0040 -3.1145e-04 0.0027 -0.0041 0.0280 -0.0143 
3.5373e-04 0.0046 0.0034 -0.0184 0.0544 -0.0165 





4.4. Information entropy analysis 
One of the very important measure to compute the randomness is information entropy. It can be 
computed by: 


n_ 1 
H(m)= $ fo p(m;) log, TE (11) 


in (11), m is a sample, n is the number of samples, and p(m) is the probability of symbol m. 
we can get the ideal value of H(m) according to (11) is 8, this mean that random information in image [21]. 
The values that we obtained of information entropy are closer to eight, this proof that the proposed scheme has 
well random. Table 7 illustrate the values of information entropy for the various plain and encrypted iris images 
and compared it with [8]. 


4.5. Resisting differential attack analysis 

The attackers typically make a small change on the selected plain image and then note the changes in 
the encrypted image. Thus, they may be able to find a relationship between the plain and encrypted 
image [22]. In order to know the effect of changing a teeny portion of pixels in the normal image 
on the encrypted image, in this paper we used the number of pixels change rate (NPCR) and unified averaged 
changed intensity (UACI). The NPCR indicator can be used to know the number of different pixels that have 
the same location in the original image and in its encrypted image, and it is defined as follows: 


dij DGS) 


W X 


NPCR= x 100% (12) 


here, w and h are the width and height of the image, C1(i, J) and C2(i, J) are the two encrypted images whose 
corresponding plain images I1 (4, J) and I2 (i, J) have only one-pixel value difference. D (1, J) = 0, if 
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C1 G, J) = C2 G, J); else DG, J) = 1. The UACI indicator is used to know the effect on encrypted image if one 
pixel is changed in plain image, and it is defined as follows: 


_ 1 (yp 1a G)- Gi) 
UACI = — (yy, SEPP") x 100% (13) 


the ideal value of NPCR and UACI are 99.61 and 33.46 [23, 24]. In this paper we implement NPCR and UACI 
measures on four color iris images and the results of the two indicators are close to ideal value. 
Table 8 shown the results of NPCR and UACI in proposed scheme and compare it with [8]. 


4.6. Peak signal to noise ratio (PSNR) 

PSNR (peak signal to noise ratio) are more popular tests for image encryption algorithms; 
Peak signal-to noise ratio can be utilized to evaluate an enciphering scheme. It is a measurement that points 
the changes in pixel values between the plain image and the cipher image. The lower value of PSNR represents 
better enciphering quality. The PSNR formula is expressed in equation bellow: 


Mx N x2552 


PSNR = 10:1 yM-tyN-1pij)— Cj)? 
810 STE PAD- CoD» 


| (14) 


where M is the width and N is the height of digital image. P(1, j) is pixel value of the plain image and C(I, J) is 
pixel value of the cipher image [25]. Table 8 shown the results of NPCR and UACI in proposed scheme and 
compare it with [8]. 


4.7. Encryption and decryption time analysis 
The execution time of image encryption and decryption in proposed system and the comparison 
with [8] are explains in Table 9. 


Table 7. Comparing Information Entropy of plain and encrypted iris image 
between proposed method and [8] 
Images Entropy of plain images Entropy of proposed system Entropy of A. Husain [8] 





1.2342 7.9980 1.9974 
7.1288 7.9989 7.9841 
7.3204 7.9990 7.9971 
7.1772 7.9991 7.9974 
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Table 8. Comparing UACI, NPCR and PSNR indicator of plain and 
encrypted iris image between proposed scheme and [8] 


mee Proposed system A. Husain [8] 
UACI NPCR PSNR UACI NPCR PSNR 
33.45 99.62 7.9478 37.71 99.85 6.8802 
34.27 99.62 7.5449 36.13 99.71 7.1288 
35:75 99.60 7.1863 37.52 99.88 6.9512 
34.73 99.56 7.4326 35.42 99.69 7.3138 





Table 9. Compering encryption and decryption time in second between proposed system and [8] 


aE Proposed system A. Husain [8] 
8 Enc. time Dec. time Enc. time Dec. time 
2.5 2.5 1.5 1.5 





5. CONCLUSION 

In this paper, the proposed scheme offers high resistance against differential and statistical attacks. 
Through the proposal iris image encryption algorithm based on the combination of permutation method, 
QR code and chaotic system has been introduced to provide high level of security for image encryption. 
Whereas the random permutation method provide high level of diffusion, and QR key provide high confusion. 
Also the use of chaotic system offer high randomness, key sensitivity, and confusion. The efficiency of this 
method has been confirmed through above experiment results. According to these results the proposed scheme 
offers high resistance against differential and statistical attacks. 
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